Last updated: 15 July 2026

QHM Consultancies (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data in accordance with the United Arab Emirates Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) (“PDPL”) and other applicable UAE laws.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit or use our website at https://qhmconsultancies.velnet.ca/ (the “Website”), purchase or access our training and e-learning services, submit forms, or otherwise interact with us.

By using the Website or providing personal data to us, you acknowledge that you have read this Privacy Policy. Where required under the PDPL, we will obtain your consent before processing your personal data.

1. Data Controller

The data controller responsible for your personal data is:

QHM Consultancies
Barsha Heights, I-Rise Tower, Office 21
Dubai, United Arab Emirates

Email: info@qhmconsultancies.ae
Phone: +971 4 834 9021

For privacy-related requests, please contact us using the details above.

2. Scope of this Policy

This Policy applies to personal data we process in connection with:

• browsing the Website;
• creating an account or purchasing courses (including cart/checkout);
• submitting contact, quote, free-course, download, or newsletter forms;
• corporate training enquiries and Learning Management System (LMS) related services;
• cookies and similar technologies;
• communications with us by email, phone, or other channels.

If you are in a free zone subject to a different regime (e.g. DIFC or ADGM) and that regime applies to a specific engagement, additional terms may apply as notified separately.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:

3.1 Identity and contact data

Name, surname, email address, phone number, company name, job title/position, country, and message content.

3.2 Account and learner data

Username/login details, course enrolments, progress, completion records, assessment results, certificates of completion, and related learning analytics where an LMS or course platform is used.

3.3 Transaction and billing data

Order details, purchased courses, invoicing information, payment status, and billing address. Payment card details are typically processed by our payment service provider(s) and are not stored in full on our servers.

Stripe

3.4 Technical and usage data

IP address, browser type, device information, pages visited, referral source, approximate location derived from IP, and similar diagnostic data collected via cookies, analytics tools, and server logs.

3.5 Marketing preferences

Your preferences for receiving marketing communications, and records of consent or opt-out.

3.6 Sensitive personal data

We do not intentionally collect sensitive personal data (such as health, biometric, religious, or biometric identifiers) through the Website. Please do not submit such information unless we expressly request it for a lawful purpose and obtain any required explicit consent under the PDPL.

3.7 Children’s data

Our services are directed at professionals and organisations. We do not knowingly collect personal data from children under [18]. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

4. How We Collect Personal Data

We collect personal data:

• directly from you (forms, account registration, checkout, email/phone);
• automatically when you use the Website (cookies, logs, analytics);
• from your organisation (e.g. employer enrols you in corporate training);
• from service providers supporting payments, hosting, LMS, email, or analytics, where permitted.

5. Purposes of Processing and Legal Bases (PDPL)

Under the PDPL, we process personal data only for specified, clear, and legitimate purposes, and on a lawful basis. These typically include:

Purpose	Examples	Typical legal basis
Provide services	Process enquiries, quotes, enrolments, course access, certificates	Contract / pre-contract steps; consent where required
Account & LMS administration	Create/manage accounts, track progress, issue certificates	Contract; legitimate interests (service delivery)
Payments & invoicing	Process orders, issue invoices, prevent fraud	Contract; legal obligation; legitimate interests
Customer support	Respond to messages and complaints	Contract; legitimate interests
Website operation & security	Maintain Website, diagnose issues, prevent abuse	Legitimate interests; legal obligation
Analytics & improvement	Understand usage and improve content/services	Consent (where cookies/analytics require it); legitimate interests where permitted
Marketing	Send course updates, offers, newsletters	Consent (and easy withdrawal); soft opt-in only where allowed
Legal & compliance	Comply with UAE law, respond to authorities, enforce terms	Legal obligation; legitimate interests

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal may mean we cannot provide certain optional features (e.g. marketing emails).

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Website, remember preferences (e.g. cart), analyse traffic, and (where enabled) support marketing.

You can manage cookies through your browser settings and, where available, our cookie banner/preferences tool. Blocking some cookies may affect Website functionality.

Strictly necessary / Functional / Analytics / Marketing, and tools used, e.g. WooCommerce cookies.

7. Sharing of Personal Data

We do not sell your personal data. We may share it with:

• Service providers acting on our instructions (hosting, LMS/e-learning platforms, payment processors, email/CRM, analytics, IT support, customer support);
• Your employer or sponsoring organisation, where they purchased training for you or manage corporate learning;
• Professional advisers (lawyers, accountants, auditors) where necessary;
• Authorities and regulators where required by UAE law or a valid legal request;
• Business transfer parties, in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

Recipients are required to protect personal data and use it only for the purposes we specify, except where they act as independent controllers under applicable law.

8. International (Cross-Border) Data Transfers

Your personal data may be stored or processed outside the United Arab Emirates, including by cloud hosting, LMS, email, analytics, or payment providers located abroad.

Where we transfer personal data outside the UAE, we will do so in accordance with the PDPL, including by:

• transferring to jurisdictions with an adequate level of protection as recognised under applicable UAE rules; and/or
• implementing appropriate contractual, technical, and organisational safeguards; and/or
• relying on another permitted transfer mechanism under the PDPL (including, where applicable, your consent).

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, including:

• Enquiry / quote / contact form data: typically [12–24 months] after last contact, unless a longer period is needed;
• Account / learner / course completion records: for the duration of the account relationship and for a reasonable period thereafter (e.g. [3–7 years]) for certification verification, audit, and dispute handling;
• Transaction / billing records: as required by UAE commercial and tax record-keeping obligations (often [at least 5–7 years] or longer if required);
• Marketing data: until you unsubscribe or withdraw consent, plus a short period to honour the opt-out;
• Security / server logs: for a limited period needed for security and troubleshooting.

When retention ends, we securely delete or anonymise the data, unless continued retention is required by law.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These may include access controls, encryption in transit, secure hosting, staff confidentiality obligations, and vendor due diligence.

No method of transmission or storage is completely secure. If we become aware of a personal data breach that requires notification under the PDPL, we will notify the UAE Data Office and affected individuals as required by law.

11. Your Rights Under the UAE PDPL

Subject to applicable exceptions under the PDPL, you have the right to:

1. Access your personal data and obtain information about how it is processed;
2. Request rectification of inaccurate or incomplete personal data;
3. Request erasure (“right to be forgotten”) in certain circumstances;
4. Restrict processing in certain circumstances;
5. Object to processing based on legitimate interests, and to object to direct marketing;
6. Data portability, where applicable (receive your data in a structured, commonly used format);
7. Withdraw consent at any time where processing is based on consent;
8. Lodge a complaint with the UAE Data Office (the UAE supervisory authority for personal data protection).

To exercise your rights, contact us at info@qhmconsultancies.ae We will respond within the timeframes required by applicable law.

We may refuse or limit a request where the PDPL permits (for example, where disclosure would adversely affect others’ rights, legal claims, or mandatory legal obligations).

12. Marketing Communications

If you subscribe to marketing or download materials, we may send you information about courses, events, and services. You can unsubscribe at any time using the link in our emails or by contacting us. We will continue to send service-related messages (e.g. enrolment confirmations, payment receipts) as needed to perform our contract with you.

13. Third-Party Links

The Website may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before providing personal data.

14. Changes to this Privacy Policy

We may update this Policy from time to time. The “Last updated” date will be revised accordingly. Material changes may be notified via the Website or by email where appropriate. Continued use of the Website after changes take effect constitutes acknowledgment of the updated Policy, except where consent is required by law.

15. Contact Us

For questions about this Privacy Policy or our personal data practices:

QHM Consultancies
Barsha Heights, I-Rise Tower, Office 21, Dubai, U.A.E.
Email: info@qhmconsultancies.ae
Phone: +971 4 834 9021

You also have the right to contact the UAE Data Office regarding complaints about personal data processing.